RE: Group policy
- From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
- Date: Tue, 27 Sep 2005 12:16:49 GMT
Hi,
Thanks for your update!
I found the following events from the event log:
Type: Error
Event ID: 101
Source: Folder Redirection
User: V#####1\m#####n
Computer: #####
Details:
Failed to perform redirection of folder My Documents.
The new directories for the redirected folder could not be created.
The folder is configured to be redirected to <\\vc1\%username%>, the final
expanded path was <\\vc1\m#####n>.
The following error occurred:
%%1307
Type: Error
Event ID: 1085
Source: Userenv
User: NT AUTHORITY\SYSTEM
Computer: #####
Details:
Folder Redirection
Analysis:
==========
This problem is very likely related to the Group Policy Folder Redirection
configurations and it was getting this event for specific users only. Based
on my experience, the cause of the issue should be that the "My Documents"
folder contained files not belonging to the user.
Please try to try my suggestions to resolve the issue:
Suggestion 1:
==========
1. Load the appropriate Group Policy from the domain.
2. Click User Configuration, click Windows Setting, and then click Folder
Redirection.
3. Right-click the appropriate Folder Redirection component, and then click
Properties.
4. Click the Basic setting in the Target tab, and then under Settings,
click to clear the "Grant the user exclusive rights to the folder name"
check box.
5. Save the settings, and then quit.
Please see if this works.
Suggestion 2:
==========
If the issue persists, please try to utilize subinacl.exe to change the
ownership of all the files and folders under My Documents. You may download
this utility from the following website:
SubInACL (SubInACL.exe)
http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-
93cf-ed6985e3927b&DisplayLang=en
You can then run the following commands to change the ownership of the
files and folders:
subinacl /file "C:\Documents and Settings\sujith\My Documents"
/owner=<domain>\ sujith
- this will only change the ownership of the folder My Documents to sujith.
subinacl /subdirectories "C:\Documents and Settings\sujith\My Documents\"
owner=<domain>\sujith
- this will change the ownership of all files and subdirectories underneath
the folder My Documents to sujith.
By resetting the owner to be relevant users and checking the path location
to the My Documents central file location, and then try to test, does the
issue be fixed?
**Important:
1. Please check the properties of my documents on the client computer to
see if it points to the server.
When you right click My Documents of the client computer, the Target folder
location should be like: \\server\users\sujith\My Documents
2. Please check the Registry key on the client computer to see if the
Personal value (Folder Redirection settings) is configured to point to
appropriate location.
The registry value is named "Personal", not My Documents.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell
Folders
You may use REGEDIT to modify it directly. Then move all of the files from
the original location to the new one.
3. To your group policy issue, this problem occurs because older versions
of the Group Policy editor cannot interpret some string types that include
more than 255 characters. These string types are included in parts of .adm
files that are meant to be excluded by the "IF VERSION" construct.
Please refer to the following KB article to apply the hotfix to fix the
issue:
842933 "The following entry in the [strings] section is too long and has
been truncated" error message when you edit or view Group Policy in Windows
Server 2003, in Windows XP, or in Windows 2000
http://support.microsoft.com/kb/842933
I appreciate your time and efforts to the issue. I am currently standing by
for your test result and glad to be further assistance.
Have a nice day!
Best Regards,
Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>X-Tomcat-ID: 288265831
>References: <250EE3E1-A921-461B-8E6E-1CEDE6C4927F@xxxxxxxxxxxxx>
<UCise5RtFHA.780@xxxxxxxxxxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain
>Content-Transfer-Encoding: 7bit
>From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
>Organization: Microsoft
>Date: Wed, 14 Sep 2005 14:05:52 GMT
>Subject: RE: Group policy
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>Message-ID: <ri5rtVTuFHA.768@xxxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Lines: 230
>Path: TK2MSFTNGXA01.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:153280
>NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
>
>Hi,
>
>Thanks for your information. Let us do some tests to isolate the root
cause
>of the issue:
>
>1. Please check the properties of my documents on the client computer to
>see if it points to the server.
>
>2. Please check the Registry key on the client computer to see if Folder
>Redirection settings are configured to point to appropriate location.
>
>The registry value is named "Personal" (without quotation marks) located
at
>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell
>Folders
>
>You may use REGEDIT to modify it directly. Then move all of the files from
>the original location to the new one.
>
>3. Please check if the user accounts are in the OU where the GPO is linked
>to.
>
>4. Please check the GPO security to make sure that the user or
>authenticated user account has Read and Apply permission. Please run
>command "gpresult /v" in client computer and check if the user sujith
>belongs to which security groups from the output report. Please check if
>anyone of these groups is granted with deny Read and Apply permission for
>any one group's Read or Apply permission is denied the user will have no
>permission to apply group policy.
>
>If you still not find the issue cause, we need to get some log files as
>following:
>
>1. Get System and Application log from client computer. Please follow the
>steps to save a text copy of Application/System log:
>
>A. Open Event Viewer: Start -> All Programs -> Administrative Tools ->
>Event Viewer.
>B. Right-click on Application/System log and select "Save Log File As?".
>
>2. Based on the following steps to enable Folder Redirection logging on
>client computer:
>
>Value Path: HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Diagnostics
>Value Name: FdeployDebugLevel
>Value Type: REG_DWORD
>Value Data: F (hex)
>Output: %windir%\debug\usermode\fdeploy.log
>
>3. Follow Q221833 to get userenv.log from the client computer.
>How to enable user environment debug logging in retail builds of Windows
>http://support.microsoft.com/kb/221833/EN-US/
>
>4. On client computer, type "Gpresult /v >c:\gp.txt" while logging with
>problematic user account, get the log file.
>
>Please add all files to a zip file and send to me.
>
>I appreciate your time and efforts to perform test. We are glad to further
>help. I am looking forward to your reply!
>
>Have a nice day!
>
>Best Regards,
>
>Jenny Wu
>Microsoft CSS Online Newsgroup Support
>Get Secure! - www.microsoft.com/security
>======================================================
>This newsgroup only focuses on SBS technical issues. If you have issues
>regarding other Microsoft products, you'd better post in the corresponding
>newsgroups so that they can be resolved in an efficient and timely manner.
>You can locate the newsgroup here:
>http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
>When opening a new thread via the web interface, we recommend you check
the
>"Notify me of replies" box to receive e-mail notifications when there are
>any updates in your thread. When responding to posts via your newsreader,
>please "Reply to Group" so that others may learn and benefit from your
>issue.
>
>Microsoft engineers can only focus on one issue per thread. Although we
>provide other information for your reference, we recommend you post
>different incidents in different threads to keep the thread clean. In
doing
>so, it will ensure your issues are resolved in a timely manner.
>
>For urgent issues, you may want to contact Microsoft CSS directly. Please
>check http://support.microsoft.com for regional support phone numbers.
>
>Any input or comments in this thread are highly appreciated.
>======================================================
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>--------------------
>>X-Tomcat-ID: 149296738
>>References: <250EE3E1-A921-461B-8E6E-1CEDE6C4927F@xxxxxxxxxxxxx>
>>MIME-Version: 1.0
>>Content-Type: text/plain
>>Content-Transfer-Encoding: 7bit
>>From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
>>Organization: Microsoft
>>Date: Fri, 09 Sep 2005 09:10:46 GMT
>>Subject: RE: Group policy
>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>Message-ID: <UCise5RtFHA.780@xxxxxxxxxxxxxxxxxxxxx>
>>Newsgroups: microsoft.public.windows.server.sbs
>>Lines: 114
>>Path: TK2MSFTNGXA01.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:151993
>>NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
>>
>>Hi,
>>
>>Thanks for posting here!
>>
>>For your description, I understand that you created a group policy to
>>redirect My Documents and applied to an OU but the policy only took
effect
>>to part of users. If I am off base, please don't hesitate to let me know.
>>
>>When a computer starts and a user logs on, there is an order in which
>>computer policy and user policy are applied. I am afraid that your group
>>policy to OU users was overridden or that policy did not be applied
>>properly. Please help me collect the following formation to analyze the
>>issue:
>>
>>1. Please help me collect the group policy report you created ( locate
the
>>group policy and right click and click Save report item to save the gpo
>>report).
>>
>>2. Please perform the following steps to perform group policy test and
>then
>>provide the results to me.
>>
>> a. On the client, click "Start"->"Run", type "CMD" without quotation
>>marks and press Enter to launch Command Prompt.
>>
>> b. Run the following commands:
>>
>> Gpresult /s > C:\gpsup.txt
>> Gpresult /v > C:\gpver.txt
>>
>> c. Send the generated C:\gpsup.txt and C:\gpver.txt files to me.
>>
>>Please add all files to a zip file and send to my mailbox:
>>v-yanniw@xxxxxxxxxxxxxx If anything is unclear, please feel free to let
me
>>know. I look forward to hearing from you.
>>
>>Related information for your reference:
>>
>>Articles for Group Policy:
>>http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Ser
v
>e
>>rHelp/6eed436f-5b05-4eaa-9525-c0c429fcf9f6.mspx
>>
>>Order of events when starting up and logging on
>>http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Ser
v
>e
>>rHelp/b74be6d3-ea6c-432f-9240-61e73168021d.mspx
>>
>>Have a nice weekend!
>>
>>Best Regards,
>>
>>Jenny Wu
>>Microsoft CSS Online Newsgroup Support
>>Get Secure! - www.microsoft.com/security
>>======================================================
>>This newsgroup only focuses on SBS technical issues. If you have issues
>>regarding other Microsoft products, you'd better post in the
corresponding
>>newsgroups so that they can be resolved in an efficient and timely
manner.
>>You can locate the newsgroup here:
>>http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>>When opening a new thread via the web interface, we recommend you check
>the
>>"Notify me of replies" box to receive e-mail notifications when there are
>>any updates in your thread. When responding to posts via your newsreader,
>>please "Reply to Group" so that others may learn and benefit from your
>>issue.
>>
>>Microsoft engineers can only focus on one issue per thread. Although we
>>provide other information for your reference, we recommend you post
>>different incidents in different threads to keep the thread clean. In
>doing
>>so, it will ensure your issues are resolved in a timely manner.
>>
>>For urgent issues, you may want to contact Microsoft CSS directly. Please
>>check http://support.microsoft.com for regional support phone numbers.
>>
>>Any input or comments in this thread are highly appreciated.
>>======================================================
>>This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>>--------------------
>>>Thread-Topic: Group policy
>>>thread-index: AcW0LSR5zAuC+cYHSia51J5SJr4mFg==
>>>X-WBNR-Posting-Host: 202.83.44.234
>>>From: =?Utf-8?B?c3VqaXRo?= <sujith@xxxxxxxxxxxxx>
>>>Subject: Group policy
>>>Date: Wed, 7 Sep 2005 21:24:02 -0700
>>>Lines: 7
>>>Message-ID: <250EE3E1-A921-461B-8E6E-1CEDE6C4927F@xxxxxxxxxxxxx>
>>>MIME-Version: 1.0
>>>Content-Type: text/plain;
>>> charset="Utf-8"
>>>Content-Transfer-Encoding: 7bit
>>>X-Newsreader: Microsoft CDO for Windows 2000
>>>Content-Class: urn:content-classes:message
>>>Importance: normal
>>>Priority: normal
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:203089
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>Hi,
>>> i am a beginner.ia m using sbs 2003 . i am trying to learn active
>>>directory myself. i set up a ou. then make some users as members. also i
>>set
>>>up a group policy for that ou. that policies are fine for administered
>>>powered users in that ou. but other users didnt get that policies. i
>>tried
>>>to change the folder redirection to my documents. i created usesusing
sbs
>>>user creation template. please help me
>>>
>>
>>
>
>
.
- References:
- Group policy
- From: sujith
- RE: Group policy
- From: "Jenny wu [MSFT]"
- Group policy
- Prev by Date: SMTP Virtual Server with a third party relaying agent, issue
- Next by Date: Re: companyweb quick launch
- Previous by thread: RE: Group policy
- Next by thread: Windows 2003 Removal
- Index(es):
Relevant Pages
|
